Online Gambling UK And Unlicensed Sites

Online gambling in the UK is lawful for adults only through operators holding a Gambling Commission licence, and offering it without one is a criminal offence. The Commission's Illegal Markets team disrupts unlicensed sites with cease and desist notices, registrar and host referrals, and search-engine removals.

The direction of travel is easy to state and hard to police. Since April 2024 the Commission's Illegal Markets team has issued 3,140 cease and desist notices and disruption notices — 2,032 cease and desist notices, 774 registrar referrals, 402 host referrals and three payment provider referrals — and secured 287,961 URL removals from 447,778 referrals to Google and Bing. Measured across 160 illegal websites, engagement fell by an average of 32 per cent after disruption. Registrar blocks and suspensions did most of the work: 91 per cent average falls each, against 30 per cent for a Google removal.

That asymmetry matters, because it tells anyone with a view of this market what the enforcement actually is. It is not a wall. It is a series of obstacles, cheapest where the Commission can reach the infrastructure and weakest where it can only ask a search engine to forget a domain.

Meanwhile the legal half of the market keeps growing. Total Great Britain gambling gross gambling yield was £17.5 billion in the year to March 2026, up 4.4 per cent, and the remote casino, betting and bingo sector — the part this page is about — took £8.3 billion of it. Illegal activity is smaller but not small: H2 Gambling Capital put stakes with illegal operators in the UK at £16.6 billion in 2025, against roughly £5 billion in 2019, with the share of gambling happening legally slipping from 97 per cent to 92 per cent over the same stretch. Those figures are estimates built on assumptions, and I would not treat any single one as precise. The direction, though, is consistent across researchers, and it points one way.

Watch duty. The scheme is GamStop — often typed "gamestop", which is not its name. Everything below about British standards is money that goes to a licensed operator; everything below about offshore sites is money that does not. Help is free and available on 0808 8020 133, the National Gambling Helpline run by GamCare, 24 hours a day.

Is Online Gambling Legal In The UK, And Where The Line Runs

It is legal, and the line is drawn at the licence rather than at the game. Section 33 of the Gambling Act 2005 makes it an offence to provide facilities for gambling without an operating licence, punishable on summary conviction by up to 51 weeks in prison, a fine up to level 5 on the standard scale, or both. The Commission states plainly that this applies to anyone offering commercial gambling services to consumers in Great Britain without a Commission licence — including an operator that holds a licence somewhere else entirely.

The drafting is deliberately wide. It is immaterial whether the facilities are provided wholly or partly by remote communication, and whether they are provided inside or outside the UK. For remote gambling, section 33 bites if at least one piece of remote gambling equipment used is situated in Great Britain, or if the person providing the facilities knows or should know that they are being, or are likely to be, used in Great Britain. A server in Curaçao and a marketing budget aimed at Manchester is not a defence.

So where does that leave the player? The offence is the operator's. Sections 47 and 49 cover children and young people, section 42 covers cheating; none of it criminalises an adult who places a bet. That is the legal position and it is worth stating precisely, because both sides of this argument tend to muddle it. The absence of a criminal offence is not the same as the presence of protection, and it is the protection that is being sold to anyone who reads the word "international" on a landing page and takes it for status.

The Commission's regulatory remit reaches only websites that trade or advertise to customers in Great Britain, and those must hold a Commission licence. That is why its public register is the only check that matters: you look the business up and you see whether the activities and the domain names listed actually match the site in front of you.

How Best Online Gambling Sites UK Are Made

Browse the launch columns and you notice that the word "licensed" has stopped meaning anything on its own. Curaçao, Anjouan, Kahnawake, Malta — all issue paper, all print seals, and none of them is the Gambling Commission. So what actually makes a site good, in the sense that the player's money is safer and the argument is already over?

The British licence does three things no offshore licence does. It requires participation in GamStop as a condition of the licence — LCCP social responsibility code 3.5.5 — since 31 March 2020. It obliges operators to check their entire customer base against the register at least every 24 hours, which is the rule that stops a self-excluded person being marketed to. And it puts the fair-and-open condition, the identity-verification condition and the ban on unfair terms behind the withdrawal.

Self-exclusion is where this becomes concrete. A GamStop registration lasts for the period chosen — six months, one year, five years or five years with auto-renewal — and stays in place after that period ends until the person contacts GamStop to remove it. It is not a pause. An offshore site is not a way round it; an unlicensed site simply is not connected to the register at all, and the Commission's own warning notice of 20 January 2025 said as much about unlicensed sites that target self-excluded customers.

What The British Licence Buys

Under the licence, a customer's deposit balance is their. Operators may not impose a maximum limit on how much a consumer can withdraw from that balance — the Commission's own example of a prohibited term is "You may withdraw up to £50 per day and up to £500 per week". Reverse withdrawals, the old trick of letting a player cancel a pending payout and play it back, were banned outright on 31 October 2021 under RTS requirement 14B. Customer funds must sit in a separate client account, and the operator must publish one of three insolvency ratings — not protected, medium protection or high protection — and remind unrated customers of the position every six months.

Then there is the identity question. A withdrawal request must not trigger a demand for information the licensee could reasonably have asked for earlier (licence condition 17.1.1), and the Commission has said it is not acceptable to introduce friction at withdrawal that was absent at deposit. That rule is not decorative: in October 2026 one licensee, running seven websites, agreed to pay £900,000 for failures that included unnecessarily delaying consumer withdrawals and a term allowing only one withdrawal request at a time.

What An Offshore Licence Buys

Not much, and it is worth being precise about why rather than dismissive. Curaçao has genuinely reformed: the National Ordinance on Games of Chance took effect on 24 December 2024, replaced the old master-licence model with direct licensing by the Curaçao Gaming Authority, and ended the legacy orange sub-licence certificates on 15 October 2025. A historic /JAZ number is not proof of a current licence. A B2C licence costs the applicant a one-time non-refundable €4,592 and the holder €47,450 a year in total fees.

Read those two numbers together with the lack of any duty to join GamStop, and you have the whole story. A Curaçao licence is real paper issued by a real authority in a small jurisdiction with a small supervisor. It tells you something is registered somewhere. It does not tell you that the operator checks the British self-exclusion register daily, holds your funds separately, or has to show cause before limiting your withdrawal.

Anjouan is the sharper case. Its B2C licence is €17,828 to issue and €17,828 a year, and Anjouan Gaming says its licences carry no territorial restrictions under Anjouan law — while also stating, in June 2026, that its licence is not and never has been a universal authorisation to operate in every country. Both statements are true and they are the trap. The regulator's own certificate-verification rules say a certificate that cannot be found on the public register should not be relied on at all, and that a seal showing a domain other than the one you are on means the site is unauthorised or fraudulent. Nor is the jurisdiction's standing settled: an ABC News investigation published in December 2025 reported claims that more than 1,300 licences were sold, and quoted Comoros officials describing the licensing entity as illegal. That is contested and reported rather than adjudicated. It is not the kind of argument a player should have to referee.

Kahnawake is stricter than most, and I will say so. It has regulated interactive gaming since 1999, requires licensees to be hosted in the Mohawk Territory, lets players set limits including zero, and makes its voluntary self-exclusion permanent and irrevocable — breach of it forfeits funds deposited or won to a charity. But a Client Provider Authorization there carries no GamStop duty, and the annual CPA fee is USD 20,000, a reminder that this is a commercial arrangement between a regulator and a business, not a consumer-protection regime with a British accent.

Delay Built Into The Terms

The offshore trick worth naming precisely is the one that profits from time rather than from confiscation. It rarely says you cannot have your money. It says the money arrives later.

A maximum withdrawal limit per day or per week means your balance is safe and also immovable. A cap on the amount withdrawable from bonus-generated winnings — BlueChip Casino's terms, for instance, limit winnings generated with bonus funds to 300 per cent of the credited bonus amount and void the excess — converts a headline offer into a smaller, contingent one. A 25× wagering requirement, as Ignition states, or the 35× to 50× typically seen on offshore welcome bonuses, is not merely harder than the British ceiling; it changes what the prize is.

And then there is the identity check that appears only at the cashier window. Over a quarter of complaints reaching the Commission's contact centre concern identity verification, raised precisely because documents were requested first at withdrawal. On a British licence that pattern is itself a regulatory failure. Offshore, it is simply a term.

The Comparison, By Method

One number in that table deserves a second look. The British wagering cap of ten times, in force since 19 January 2026, is not a nudge. The Commission said when it chose the cap that the limit "will take out extreme levels as some licensees currently apply up to 60 times wagering requirements". A 40× offer is not a generous offshore version of a British one. It is the thing the cap was invented to stop.

The Single Factor In Most Gambling Disputes

If a page like this had to keep one section and lose the rest, it would keep this one. The mechanic that determines whether a dispute exists at all is when the operator asks who you are, and how long you are left waiting for an answer.

How It Works The First Time

Traditionally the sequence ran: register with a name and a date of birth, deposit, gamble, and only meet the compliance department at the point of withdrawal. That is the model that generated most of the complaints this market produces. It is also the model the Commission has spent years dismantling. It expects identity and age checks brought forward to before a customer deposits or stakes, and it has been explicit that onboarding on incomplete or inaccurate information — initials instead of full names, nicknames, commercial addresses instead of residential ones — is not sufficient.

In practice this means the first encounter is now lighter, not heavier, for most people. Companies can often verify identity by matching the account against credit reference agencies and the electoral roll, in which case no documents are needed at all. Where that match fails, a driving licence, passport or household bill is the usual currency.

There is a legal floor too. Under the Money Laundering Regulations 2017, a remote casino must identify and verify a customer when they deposit funds to gamble, or withdraw funds or winnings, amounting to €2,000 or more — measured per transaction and across transactions that appear linked, which includes activity within a single logged-on session. Some operators use what the Commission calls a hybrid approach: identify at registration, defer full verification until the threshold. The Commission's direction of travel is against deferral, and it has said so.

How It Works Later

Checks do not stop at the door. Customer due diligence is ongoing and can be refreshed when circumstances or details change. Higher-risk accounts — and, absent safeguards, any non-face-to-face relationship is treated as higher risk — will also be asked for source of wealth. Financial vulnerability checks became a licence requirement in August 2024, initially at £500 of net deposits in a rolling 30-day period, and the threshold dropped to £150 net deposits over 30 days from 28 February 2025. Financial risk assessments come later and lighter: announced on 7 July 2026 to be introduced in stages, starting with the largest operators at £5,000 net deposits in a rolling 24 hours for customers aged 25 and over and £2,500 for under-25s, tightening eventually to £1,000 in 24 hours or £3,000 over 90 days.

The Commission's own figures make the scale less alarming than the headlines. In the three months after the vulnerability requirement, operators ran checks on 7 per cent of active accounts; 78 per cent of checks came back within 10 minutes and a further 10 per cent within two hours. Fewer than 0.5 per cent of customers exceed the £5,000 first-stage FRA threshold. That is not nothing. It is also not the general experience.

The Warning Signs

Three patterns should end the argument. First, documents demanded only when you try to take money out — on a British licence that is a breach of condition 17, and over a quarter of the complaints reaching the regulator are exactly this. Second, a fee or a time limit attached to the withdrawal itself, where the terms were not clear before the deposit; the Commission's position is that where there are no regulatory concerns about a customer, there is no valid reason to delay a payout. Third, and worst, the operator that suggests a self-excluded person might be welcome anyway. Offshore websites that target people who have self-excluded through GamStop are named in the Commission's warning notice of 20 January 2025 as a specific concern.

Five Signs A Site Can Be Trusted

It Appears On The Commission's Public Register

The check takes a minute. Look the business up and, crucially, confirm that the domain you are on is one of the domains listed against that licence. A licence number pasted into a footer means nothing on its own; the Commission's advice is to click through to the register and see whether the activities and domain names match. A site that carries a seal but is absent from the register, or whose registered domains do not include the one you are reading, has failed the only test that counts.

It Asks Who You Are Before It Takes Your Money

A site that verifies identity at sign-up, or at first deposit, is doing the compliant thing. A site that lets you deposit for weeks with a name and a date of birth and then produces a document list at the cashier window is following the older, more profitable sequence. The quick check: read the terms and look for the identity and age verification section, and note whether the site tells you, before you deposit, what documents it may ask for and in which circumstances. The Commission expects that warning in advance.

It States How Your Money Is Protected If It Fails

Every licensee holding customer funds must state one of three published ratings — not protected, medium protection or high protection — and the operator rated "not protected" must remind you every six months that your funds are not protected in the event of insolvency. The quick check is the terms and conditions, in writing. Two things to hold on to: a separate client bank account does not guarantee the money back if the operator becomes insolvent, and money staked within an open bet is not customer funds at all. If you cannot find the rating, that is the answer.

Its Bonus Terms Are Short Enough To Read Once

Since 19 January 2026 a British licensee cannot apply wagering requirements above ten times, cannot mix products within one incentive — a "bet £5, get 20 free spins" offer is non-compliant because it links a bet to a casino prize — and must set terms that are clear, transparent, fair and readily accessible. Significant conditions must be no further than one click away. The quick check: find the wagering figure and the maximum-bet-while-wagering rule. A cap of £5 per spin while wagering, of the kind BlueChip applies, is how a bonus quietly becomes unwinnable.

It Will Name Someone Other Than Itself To Appeal To

A British licensee must have arrangements for a customer to refer an unresolved dispute to an approved alternative dispute resolution provider, free of charge, once eight weeks have passed without resolution or a deadlock letter has been issued. The Commission's approved list includes IBAS, eCOGRA, CEDR, ADR Group, Pegasus ADR Service, ProMediate, an operator and the Tattersalls Committee. IBAS and eCOGRA have historically handled most gambling disputes. The quick check: the complaints section of the terms should name a provider. If the only remedy on offer is the operator's own customer service team, that is where the chain stops.

How To Judge An Online Gambling Site In Five Minutes

1. Check the licence against the domain. Look the operator up on the Commission's public register and confirm the site you are on is listed against it. Reason: an operator can hold a valid licence for one domain and run another without one, and a licence in another jurisdiction is no substitute.
2. Read the customer-funds rating before you deposit. Find the "not protected", "medium protection" or "high protection" statement in the terms. Reason: it tells you what happens to your balance if the business fails, and a client account alone does not mean your money comes back.
3. Find the wagering figure and the maximum bet cap. Ten times is the British ceiling on bonus funds; check what you are being asked to play through and what bet sizes are permitted while doing it. Reason: an unreadable wagering term is the single most common way a generous offer turns out to be worth less than the deposit.
4. Look for the withdrawal page before the deposit page. Note whether the site publishes a withdrawal limit, a processing fee, or a document list. Reason: terms that appear only at the cashier window are the terms that matter, and a maximum withdrawal limit on your deposit balance is a prohibited term on a British licence.
5. Confirm a named ADR provider. The complaints section should name an approved provider and state that the service is free. Reason: eight weeks of deadlock is normal, and after that a decision you can rely on beats a promise.
6. If self-exclusion applies, set it with GamStop and not with the operator. Registration lasts the period chosen and stays in place until GamStop is contacted to remove it, and up to 24 hours can pass before the block takes effect. Reason: an operator-level exclusion covers one brand; the register covers every British licensee. Blocking software — Gamban or BetBlocker — and a bank gambling block add layers, and the Commission's list of banks offering blocks includes Monzo, Starling, Barclays, HSBC, Lloyds, NatWest, Santander and others.

What The Regulator's Own Numbers Show

The enforcement figures are the honest half of this story, because they include the failures. In the quarter January to March 2026 the Commission referred 226 websites to search engines and issued 98 cease and desist notices. In April to June 2026 it referred 366 websites covering 147,721 URLs. In July to September 2026 it referred 1,835 websites and 7,677,211 URLs and issued 546 cease and desist notices. Across April 2025 to March 2026, every quarter recorded zero or one prosecutions commenced — one in total, in October to December 2025.

Read those two paragraphs together. The volume of referral activity is enormous and growing. Criminal enforcement is close to nil. That is not a scandal so much as a description of the machinery: disruption works on infrastructure and search results, and those are cheap, reversible and legal. Registrar blocks and suspensions produced average engagement falls of 91 per cent each; geo IP blocking, 60 per cent; Google removal, 30 per cent. The Commission itself says search-engine removal makes a site harder to find but does not fully block access. Removing a result is a nuisance. Removing a domain is a business.

How big is the nuisance? Just over 1,000 unique illegal gambling websites were accessed by consumers in Great Britain over the period May 2024 to July 2025. In September 2026 the Commission's dashboard recorded 586 illegal websites accessible to GB consumers, 4 per cent below the previous three-month average. Time spent on illegal sites was estimated at 306 million minutes in January 2025, falling to 116 million minutes in June 2025 and 152 million in July 2025 — a figure the Commission explicitly notes does not capture activity hidden by VPNs.

The player-side numbers are smaller than the trade press implies. The Commission's analysis published on 5 November 2026 estimated that 2.5 per cent of respondents who had gambled online in the previous four weeks had engaged with illegal gambling websites, with a further 1.5 per cent doing so in the past year; across the whole population including non-gamblers, 0.6 per cent had engaged in the past four weeks. Whether that is a rounding error or a slow leak depends on which estimate of the black market you accept, and the published ones differ by an order of magnitude. The Commission's own October 2024 methodology assumes £0.32 of gross gambling yield per minute of online slots play; H2 Gambling Capital puts illegal stakes at £16.6 billion; Frontier Economics, for the Betting and Gaming Council, estimated £2.7 billion a year online. Pick your number and you pick your conclusion. The Commission does not dispute that its method misses VPN traffic.

Recent Changes To Gambling Rules

The rulebook has moved faster than most players realise, and four changes define the current market. Online slots stake limits went live on 9 April 2025 at £5 per game cycle for all adults, and on 21 May 2025 at £2 for adults aged 18 to 24 — attaching to every remote casino operating licence, and applying only to slots, not to roulette or blackjack. The credit card ban, in force since 14 April 2020 under licence condition 6.1.2, covers all remote gambling licensed by the Commission and extends to e-wallet funding traceable to a credit card. Since 31 October 2025 all gambling businesses must prompt customers to set a financial limit before their first deposit, with setting a limit the default option under RTS 12E. And the statutory levy, commenced on 6 April 2025, charges online operators 1.1 per cent of previous-year gross gambling yield — raising just under £120 million in its first year, ringfenced for research, prevention and treatment, and split 50 per cent treatment, 30 per cent prevention and 20 per cent research.

Two smaller things are worth knowing because they are asked about constantly. Winnings are not taxed in the player's hands in Great Britain; the levy falls on operators, which is why the question of tax on gambling winnings has a different answer here than in most countries. And a minimum of 2.5 seconds must elapse between online slots game cycles under RTS 14D, a rule that exists because speed is itself a product feature.

Where the Commission does find failures, it charges for them. An operator paid £170,000 in July 2025 for regulatory failures including a bonus term giving the operator discretion to close accounts or forfeit winnings. L & L Europe's £900,000 settlement followed in October 2026. Both were British-licensed.

Market Participation And Numbers

There is no published count of British-licensed online gambling sites, and anyone who gives you a round number is guessing. What the Commission does publish is activity. In January to March 2026, online gross gambling yield was £1.55 billion, up 7 per cent year on year, on 26.8 billion bets and spins and 13.4 million average monthly active accounts — down 1 per cent. Online slots alone took £773 million of that, up 12 per cent, on 25.1 billion spins. That dataset covers roughly 70 per cent of the online market, the largest operators, and the Commission cautions against comparing it with its separate industry statistics because it may include free bets and bonuses.

On people, the Gambling Survey for Great Britain's third annual report, published 16 July 2026, was based on 20,775 adults with fieldwork from January 2025 to January 2026. Forty-seven per cent had gambled in any form in the past four weeks, falling to 27 per cent when pure lottery players are excluded. On harm, 2.4 per cent scored 8 or more on the Problem Gambling Severity Index — a figure the Commission describes as stable across three years, at 2.5, 2.7 and 2.4 per cent. Of those who had gambled in the past 12 months, 3.4 per cent had sought support because of their own gambling, and 2.7 per cent reported one or more severe consequences, with relationship breakdown the most reported at 1.7 per cent.

The self-exclusion figures are the ones that stay with me. Gamstop Online recorded 117,756 new registrations in 2025 and had 561,983 active exclusions at the end of the year, or over 562,000 with 58,675 in the final six months — an average of 319 a day. The first half of 2026 brought a 16 per cent year-on-year increase and a record month in May 2026 at 12,236 sign-ups. As of July 2026 there were 614,738 people on the register, more than one in two of them on the maximum five-year term, and only one in four on six months. Under-25s accounted for nearly one in three of all registrations in the first half of 2026, up 26 per cent year on year. In 2025 the gender split was 94.3 per cent male and 5.7 per cent female.

Those are not the numbers of a market where exclusion is a rare last resort. They are the numbers of a market where hundreds of thousands of people have concluded, deliberately and in writing, that the best outcome for them is to be unable to gamble online with a British licensee at all — and where the trade press still finds an audience for the suggestion that a site outside the register offers something better.

Why Generous Offers Are Not Free

A bonus is a price the operator pays to acquire a customer, and the wagering requirement is how it claws the price back. That is not cynicism; it is how the arithmetic works, and the British rulebook now reflects it. Since 19 January 2026 the cap is ten times on bonus funds, mixed-product promotions are banned outright, and significant conditions must be no further than one click away under LCCP social responsibility code 5.1.9. The Commission chose a cap over an outright ban on the reasoning that licensees would otherwise simply write terms preventing customers cashing out bonuses at all.

Two structural protections come with that. Wagering requirements must not apply to play with your own deposit balance, and deposit and bonus balances must always be displayed separately — the rules that ended the sticky-bonus practice, where the bonus itself could never be withdrawn and vanished on cash-out. Add the CMA's position, obtained as written undertakings from six operators in 2019, that customers should be able to exit a promotion at any time with their remaining deposit and any winnings from play with that deposit, and the British offer is at least legible.

Offshore, none of that holds. Ignition states bonus amounts carry a 25× playthrough requirement, with slots and specialty games contributing 100 per cent of each wager, table games 20 per cent, video poker and blackjack 10 per cent, roulette and baccarat 5 per cent, and craps, live dealer and Hot Drop Jackpots 0 per cent. A 25× requirement where roulette contributes five per cent is a 500× requirement for anyone who does not read the contribution chart. Ignition also caps the maximum bet while wagering at 20 per cent of the deposited amount, and states that breaking the rule may mean account closure and forfeiture of the bonus and winnings.

Both Ignition and BlueChip write in terms that describe prohibited play — low-margin or zero-risk bets, switching from a low-weighted game to a high-weighted one after a large win — under the heading of bonus abuse. British guidance takes a different line: terms setting out promotional play restrictions must specify the prohibited types or patterns of play, and must not reserve sole discretion for the operator to decide when play breaches them. It is also why the Commission criticised a Fafabet term giving the operator discretion to close accounts or forfeit winnings. "We may, at our discretion" is not a rule. It is an option held by the other side.

Same Rules On Smaller Screens

An app is not a separate market, and the licence covers the product whether it arrives through a browser or a store listing. The practical consequences of the small screen are the ones to watch. Push notifications at two in the morning are marketing, and a British operator must not market to a person registered with GamStop Online — the April 2020 customer-base checking requirement, at least every 24 hours, exists precisely to prevent that and to stop direct marketing reaching registered people. If marketing arrives from a site you have not excluded from, that tells you something unambiguous about its regulatory position.

Three checks transfer unchanged. A financial limit must be offered before the first deposit and presented as the default, with a free-text box at account level and a review prompt every six months. Games must run to the 2.5-second minimum cycle. And the identity position is the same as on the desktop — the app cannot defer verification that the licence requires up front.

One thing genuinely does differ. Gambling blocking software, which GamStop signposts in the form of Gamban and BetBlocker, installs at device level, and BetBlocker states it blocks over 1,368,000 gambling websites and 3,100 apps worldwide without registration and free of charge. It is the one control that follows a phone rather than an account. Gamban blocks licensed and unlicensed sites and is designed to be hard to remove, though its free UK licence scheme, TalkBanStop, ended on 31 March 2026; it remains free for residents of Wales, and costs £4.99 a month or £29.99 a year in England and Scotland after a 7-day trial.

Judging An Online Gambling Site

Strip out the marketing and a judgement about a site comes down to four questions with published answers. Who licenses it, and does the domain appear on that regulator's register? What happens to my balance if the business fails, and is that stated in the terms? When will I be asked to prove who I am — before the deposit or at the cashier window? And what happens if it goes wrong, meaning which approved body hears the appeal and in what timeframe?

The British answers are specific. The fair-and-open condition requires terms to be fair, transparent and not misleading. Customer funds are either protected at a stated level or disclosed as unprotected, with a reminder every six months. Identity is expected before the deposit, not after. And an approved ADR provider must be available free of charge after eight weeks. None of those guarantees is absolute, and I would not pretend the British market has solved withdrawals: the Commission's Annual Report for 2024-25 recorded that, despite work with some operators, issues relating to withdrawals continue to be the cause of most complaints it receives, and its contact centre has fielded around 2,000 withdrawal complaints a year. Complaints coded as withdrawals and financial transactions fell from 2,416 in the year to December 2022 to 1,791 in the year to December 2025. Better. Not fixed.

The point of comparison is not perfection. It is recourse. A British-licensed operator that delays your payout for no reason, attaches an unfair term, or applies a maximum limit to your deposit balance is in breach of something specific, and there is a route from that breach to a decision that binds. An offshore site holding a licence in a jurisdiction with no GamStop duty, no fair-terms condition and no approved British ADR provider has to answer to nobody in this country at all.

What The Watchdog Keeps Getting Wrong

I will end the argument section with the part that does not flatter the regulator, because the enforcement record has an obvious soft spot. The Commission refers illegal sites to search engines by the tens of thousands of URLs, reports traffic reductions of 30 per cent from a Google removal, and notes in its own analysis that search removal does not fully block access. Meanwhile prosecutions have run at zero or one a quarter for a year. That is a deliberate strategy of disruption over deterrence, and it works well against infrastructure the Commission can actually reach: 91 per cent average engagement falls from registrar blocks and suspensions. It works badly against operators whose domains rotate faster than referrals can be filed.

There is also the report-by-report problem. The Commission publishes, then restates. Its own figures for time spent on illegal sites drop from 306 million minutes in January 2025 to 116 million in June and back to 152 million in July. Trade and campaign estimates of the black market differ by a factor of six. Anyone quoting a single number with confidence, in either direction, is quoting a method as much as a measurement.

And there is a real gap on the licensing side. A licence issued in Anjouan costs €17,828 a year and, per its own regulator, carries no territorial restriction under local law. The Gambling Commission's warning notice in January 2025 flagged unlicensed sites targeting GamStop-registered customers. The Commission cannot license those sites, cannot fine them, and can only ask registrars, hosts and search engines to make them harder to find. That is the architecture: deterrence by inconvenience.

Which is why the practical advice is duller than either side of the argument wants. Check the register. Check the terms for the customer-funds rating, the wagering figure and the withdrawal limit. Set a financial limit before the first deposit. If you are going to exclude, do it at the register rather than at one brand. And if gambling has stopped being a choice, the National Gambling Helpline — 0808 8020 133, free, 24 hours — is where the treatment route starts. The levy that pays for that route raised just under £120 million in its first year, all of it ringfenced for research, prevention and treatment. Some of the money in this market goes to help. Very little of it comes from offshore.

Frequently Asked Questions

Is online gambling legal in the UK?

Yes, for adults, provided the operator holds a Gambling Commission licence for the activity and the domain. Section 33 of the Gambling Act 2005 makes it an offence to provide gambling facilities without a licence, and the Commission states that this covers anyone serving consumers in Great Britain — including an operator licensed only in another jurisdiction. The offence falls on the operator, not on the player.

How many online gambling sites are there in the UK?

There is no published count of British-licensed sites, and round numbers circulating online are estimates. What the Commission reports is activity: online gross gambling yield of £1.55 billion in January to March 2026, across 13.4 million average monthly active accounts and 26.8 billion bets and spins. Separately, its illegal gambling dashboard recorded 586 illegal websites accessible to GB consumers in September 2026.

How many people gamble online in the UK?

The Gambling Survey for Great Britain, published 16 July 2026 and based on 20,775 adults, found 47 per cent had gambled in any form in the past four weeks, falling to 27 per cent when pure lottery participation is excluded. The Commission's operator dataset recorded 13.4 million average monthly active online accounts in the quarter to March 2026, though one person may hold several accounts.

Is online gambling taxable in the UK?

No — winnings are not taxed in the player's hands in Great Britain. Taxation falls on the operator instead, most recently through the statutory gambling levy introduced by the Gambling Levy Regulations 2025, which commenced on 6 April 2025 and charges all online operators 1.1 per cent of previous-year gross gambling yield. It raised just under £120 million in its first year.

Can I get a refund from an online casino?

Only on a specific ground. Undisputed deposit balances remain your, and operators may not confiscate them or impose a maximum withdrawal limit on them. Beyond that, a complaint goes through the operator's procedure first, then to an approved alternative dispute resolution provider free of charge after eight weeks or a deadlock letter. The Commission itself cannot obtain money back for an individual.

How long does a GamStop exclusion last?

The term is six months, one year, five years or five years with auto-renewal, chosen at registration. It cannot be cancelled during that period, and it remains in place after the term ends until the person contacts GamStop to remove it. Up to 24 hours may pass before the block takes effect. An offshore site is not a way round it — the register only covers British licensees.

Which payment method withdraws fastest?

Bitcoin's protocol targets a 10-minute block interval but gives no guarantee: within any 10-minute window the chance of a block is about 63 per cent, rising to 95 per cent within 30 minutes. Litecoin averages 2.5 minutes per block, though only about 55 per cent of six-confirmation spans finish within 15 minutes. On the bank side, Faster Payments completes over 90 per cent of transactions in under two seconds, against a £1 million scheme ceiling.

The Short Version, And One Number To Keep

The British market's protections are real, specific and conditional on the licence: GamStop participation under LCCP 3.5.5, a ten-times cap on bonus wagering, a ban on reverse withdrawals, separately held customer funds with a published insolvency rating, and a free route to an approved adjudicator after eight weeks. None of it applies to a site without a Gambling Commission licence. The regulator's response to those sites is disruption rather than deterrence — 3,140 cease and desist and disruption notices since April 2024, 287,961 URLs removed — which produces average engagement falls of 91 per cent from a registrar block and 30 per cent from a search-engine removal. The Commission says so itself: search removal makes a site harder to find, not impossible to reach. In the year to March 2026 it commenced one prosecution.

Meanwhile 614,738 people were on the GamStop register as of July 2026, more than half of them on the maximum five-year term, and 117,756 registered during 2025 alone. Those people have made a decision that the industry's marketing budget treats as an obstacle. The register is not an obstacle. It holds for its full term and stays in place until GamStop is contacted to remove it, and the National Gambling Helpline on 0808 8020 133 answers 24 hours a day, free, for anyone who needs the other route. As of 13.11.2026, the number worth remembering is the one thing no offshore licence can offer: 91 per cent — what a registrar block does to a site's traffic, and why the operators who matter are the ones already on the register.